Bug 1112664

Summary: 'Access denied' when registering using --consumerid
Product: Red Hat Satellite Reporter: Tomas Lestach <tlestach>
Component: RegistrationAssignee: Dustin Tsang <dtsang>
Status: CLOSED CURRENTRELEASE QA Contact: sthirugn <sthirugn>
Severity: medium Docs Contact:
Priority: high    
Version: 6.0.3CC: bbuckingham, bkearney, cperry, jmontleo, mmccune, sthirugn, tomckay
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
URL: http://projects.theforeman.org/issues/6367
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-09-11 12:20:05 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1126376, 1128455    
Bug Blocks:    
Attachments:
Description Flags
relevant part of /var/log/foreman/production.log none

Description Tomas Lestach 2014-06-24 12:45:02 UTC 
Created attachment 911709 [details]
relevant part of /var/log/foreman/production.log

Description of problem:
I created a content-host profile on sat6 using hammer and wanted to register and attach a client machine to the existing profile. The registration process failed with 'Access denied'.

Version-Release number of selected component (if applicable):
Satellite-6.0.3-RHEL-6-20140620.0

How reproducible:
always

Steps to Reproduce:
1. on sat6 server:
# hammer content-host create --organization-id 1 --name try 
Name:                  try
ID:                    08044f08-ec92-4215-a2dc-3cb4f524c31f
Description:           Initial Registration Params
Location:              None
Lifecycle Environment: Library
Content View:          Default Organization View
Entitlement Status:    valid
Release Version:       
Autoheal:              true

Content host created

2. on the client machine:
# rpm -qa katello-ca-consumer*
#
# rpm -Uvh http://ibm-x3650-05.ovirt.rhts.eng.bos.redhat.com/pub/katello-ca-consumer-latest.noarch.rpm
Retrieving http://ibm-x3650-05.ovirt.rhts.eng.bos.redhat.com/pub/katello-ca-consumer-latest.noarch.rpm
Preparing...                ########################################### [100%]
   1:katello-ca-consumer-ibm########################################### [100%]
#
# rpm -qa katello-ca-consumer*katello-ca-consumer-ibm-x3650-05.ovirt.rhts.eng.bos.redhat.com-1.0-1
#
# subscription-manager register --consumerid 08044f08-ec92-4215-a2dc-3cb4f524c31f --force 
Username: admin
Password: 
Access denied

Actual results:
Access denied

Expected results:
Successful registration and attachment with the existing profile

Additional info:
Relevant part of /var/log/foreman/production.log in attachment.
This is a real blocker for system profile migration from Sat5.
Comment 3 Dustin Tsang 2014-06-24 21:33:39 UTC 
redmine issue created
Comment 5 sthirugn@redhat.com 2014-08-10 14:25:49 UTC 
Failed and blocked with https://bugzilla.redhat.com/show_bug.cgi?id=1128455.  Move this to ON_QA when 1128455 is fixed and ready to test.
Comment 6 Dustin Tsang 2014-08-11 15:29:56 UTC 
1126376 moved to post; moving to on_qa
Comment 7 sthirugn@redhat.com 2014-08-14 05:38:56 UTC 
Verified.

# curl -X POST -H "Accept:application/json" -H "Content-Type: application/json" -u admin:changeme --insecure -d '{"type":"system","facts":{"1":"1"}, "organization_id":3, "name":"testsystem12.redhat.com","environment_id":3, "content_view_id":3}' https://cloud-qe-14.idm.lab.bos.redhat.com/katello/api/systems
**this created content host successfully**

On the client:
# subscription-manager register --consumerid='70da499c-d450-47e5-a5a4-633160dcc270'
Username: admin
Password: 
The system has been registered with ID: 70da499c-d450-47e5-a5a4-633160dcc270

Version Tested:
GA Snap 5 - Satellite-6.0.4-RHEL-6-20140813.2

* apr-util-ldap-1.3.9-3.el6_0.1.x86_64
* candlepin-0.9.23-1.el6_5.noarch
* candlepin-common-1.0.1-1.el6_5.noarch
* candlepin-scl-1-5.el6_4.noarch
* candlepin-scl-quartz-2.1.5-5.el6_4.noarch
* candlepin-scl-rhino-1.7R3-1.el6_4.noarch
* candlepin-scl-runtime-1-5.el6_4.noarch
* candlepin-selinux-0.9.23-1.el6_5.noarch
* candlepin-tomcat6-0.9.23-1.el6_5.noarch
* elasticsearch-0.90.10-4.el6sat.noarch
* foreman-1.6.0.40-1.el6sat.noarch
* foreman-compute-1.6.0.40-1.el6sat.noarch
* foreman-gce-1.6.0.40-1.el6sat.noarch
* foreman-libvirt-1.6.0.40-1.el6sat.noarch
* foreman-ovirt-1.6.0.40-1.el6sat.noarch
* foreman-postgresql-1.6.0.40-1.el6sat.noarch
* foreman-proxy-1.6.0.27-1.el6sat.noarch
* foreman-selinux-1.6.0.6-1.el6sat.noarch
* foreman-vmware-1.6.0.40-1.el6sat.noarch
* katello-1.5.0-28.el6sat.noarch
* katello-ca-1.0-1.noarch
* katello-certs-tools-1.5.6-1.el6sat.noarch
* katello-installer-0.0.59-1.el6sat.noarch
* openldap-2.4.23-34.el6_5.1.x86_64
* openldap-devel-2.4.23-34.el6_5.1.x86_64
* pulp-katello-0.3-3.el6sat.noarch
* pulp-nodes-common-2.4.0-0.30.beta.el6sat.noarch
* pulp-nodes-parent-2.4.0-0.30.beta.el6sat.noarch
* pulp-puppet-plugins-2.4.0-0.30.beta.el6sat.noarch
* pulp-puppet-tools-2.4.0-0.30.beta.el6sat.noarch
* pulp-rpm-plugins-2.4.0-0.30.beta.el6sat.noarch
* pulp-selinux-2.4.0-0.30.beta.el6sat.noarch
* pulp-server-2.4.0-0.30.beta.el6sat.noarch
* python-ldap-2.3.10-1.el6.x86_64
* ruby193-rubygem-net-ldap-0.3.1-3.el6sat.noarch
* ruby193-rubygem-runcible-1.1.0-2.el6sat.noarch
Comment 8 Bryan Kearney 2014-09-11 12:20:05 UTC 
This was delivered with Satellite 6.0 which was released on 10 September 2014.